fa491614b064eefc49b18d22aa4fef52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa491614b064eefc49b18d22aa4fef52
Size

91KB
MD5

fa491614b064eefc49b18d22aa4fef52
SHA1

8d6496f63a287727ddee1e7f36959f5767e7dd8b
SHA256

e1651a8cc9520fb01d4c52b80a93a38907d13bb23a6d89260ddce714336f5551
SHA512

1064ef49f40a5e682d5467b2a9e861c123c378eff3bcea93ddf6a2d4e1624b0663a7fe30f7dacbd80828bd4b520d7a46242732bf6653295140accaa4f74e3ba3
SSDEEP

1536:++uBNtzL7miLjDvpDUXQpqHLurlSA3w2Dn4MJrjm:ABNtf6CLRaQoKEA3D2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa491614b064eefc49b18d22aa4fef52

Files

fa491614b064eefc49b18d22aa4fef52
.dll windows:4 windows x86 arch:x86

4ae8cce1cdb668a8fad907517a62efc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileA
Beep

Exports

Exports

svkdhu

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ